Archive
5 November 2018
Vulnerabilities first published on this day (UTC), newest first.
22 results · Feed
-
Unscored —
A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, …
-
Unscored —
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, mem…
-
Unscored —
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offs…
-
Unscored —
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it i…
-
Unscored —
An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_p…
-
Unscored —
There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via G…
-
Unscored —
There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git s…
-
Unscored —
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a de…
-
Unscored —
A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4. If the backend is enabl…
-
Unscored —CVE-2018-9208 Public exploit
Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1Beta
-
Unscored —CVE-2018-18949 EPSS 24%
Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.
-
Unscored —
KindEditor through 4.1.11 has a path traversal vulnerability in php/upload_json.php. Anyone can browse a file or direct…
-
Unscored —
JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI.
-
Unscored —
An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=component&act=addnew URI, as de…
-
Medium 4.8
XSS in baserCMS before 4.1.4
An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[UploaderCategory][name] parameter to an admin/uploader/uploader_categories/edit URI.
-
Unscored —
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via an ontoggle attribute t…
-
Unscored —
An issue was discovered in PopojiCMS v2.0.1. admin_library.php allows remote attackers to delete arbitrary files via di…
-
Unscored —
An issue was discovered in PopojiCMS v2.0.1. admin_component.php is exploitable via the po-admin/route.php?mod=componen…
-
Unscored —
The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote at…
-
Unscored —
An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSet_getValues in client/ied_…
-
Unscored —
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field.
-
High 7.2
RCE in baserCMS before 4.1.4
In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConfig][logo] parameter.